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DETAILED ACTION 
Status of Claims 

1 . This action is in reply to tine Arguments/Remarl<s filed on January 9, 2009. 

2. Claims 1-23 are currently pending and have been examined. 

Information Disclosure Statement 

3. The Information Disclosure Statement filed on January 9, 2009 has been 
considered. An initialed copy of the Form 1449 is enclosed herewith. 



Claim Rejections - 35 USC § 102 

4. The following Is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on sale in this 
country, more than one year prior to the date of application for patent in the United States. 

5. Claims 1-3, 7, 8, 10, 11, 15, and 21 are rejected under U.S.C. 102(b) as being 
unpatentable over Kermani, U.S. Patent No. 6,895,514. 

Claim 1: 

Kermani, as shown, discloses the following limitations: 

• providing instructions stored on a memory for assigning a score to a first 
of said keystrokes [[K1]]ki (see at least column 5, lines 37-41); 
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• providing instructions stored on a memory for assigning a score to 
succeeding l<eystrokes after [[K1]]ki based upon tlie time independent 
location of the keystroke in relation to another keystroke (see at least 
column 5, lines 62-67); 

• providing instructions stored on a memory for summing at least three of 
the scores of the keystrokes in the string to obtain a string score (see at 
least column 4, lines 35-38); 

• providing instructions stored on a memory for dividing the string score by 
the number of keystrokes used to determine the sum to obtain a 
normalized string score and (see at least column 4, lines 35-38); 

• providing instructions stored on a memory for comparing the normalized 
string score to a predetermined value of normalized string scores to 
determine the likelihood that the keystroke entries are accurate (see at 
least column 2, lines 29-32). 



Claim 2: 

Kermani, as shown, discloses the following limitations: 

• the keystroke [[K2]]k2 is immediately after the keystroke [[K1]]ki and each 
succeeding keystroke is provided with a score based upon its location 
from a preceding keystroke (see at least column 5, lines 62-67). 



Claim 3: 
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Kermani, as shown, discloses the following limitations: 

• each keystroke's score after ki is based on its location in relation to the 
immediately preceding keystroke (see at least column 5, lines 62-67). 



Claim 7: 

Kermani, as shown, discloses the following limitations: 

• further comprising making a preliminary determination of a risk of fraud or 
error based upon the comparative value of the normalized string score to 
said predetermined value of normalized string scores (see at least column 
2, lines 16-22). 



Claim 8: 

Kermani, as shown, discloses the following limitations: 

• further Including calculating the normalized string scores for a plurality of 
strings, summing the normalized string scores to obtain a transactional 
score, and dividing the transactional score by the number of strings in the 
sum to obtain a normalized transactional score and determining accuracy 
based upon the value of the normalized transactional score In comparison 
to a predetermined value of normalized transactional scores (see at least 
column 4, lines 35-38). 



Claim 10: 
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Kermani, as shown, discloses the following limitations: 

• a processor (see at least column 4, lines 6-1 7); 

• a memory coupled to said processor, said memory storing keystroke fraud 
instructions adapted to be executed by said processor to assign a score to 
a keystroke Km based upon the time independent location of the 
keystroke in relation to another keystroke Kn, t without regard to an 
amount of time associated with entering the keystrokes to sum the scores 
of the keystrokes in a string entered on the keyboard to obtain a string 
score and to divide the sum of the keystroke scores by the number of 
keystrokes in the string to obtain a normalized string score and a means 
for comparing said normalized string score to a predetermined score to 
determine the accuracy of said keystroke entries (see at least column 4, 
lines 6-17). 

Claim 11: 

Kermani, as shown, discloses the following limitations: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to store in said memory an indication of the absence of 

accuracy associated with said string based upon said normalized string 
score in comparison to a range of said predetermined scores (see at least 
column 8, lines 17-21). 



Claim 15: 
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Kermani, as shown, discloses tine following limitations: 

• assigning a score to a keystroke km based upon the time independent 
location of the keystroke from another keystroke kn without regard to an 
amount of time associated with entering the keystrokes (see at least 
column 5, lines 62-67); 

• summing the scores of at least three of the keystrokes in the string to 
obtain a string score (see at least column 4, lines 35-38); 

• dividing the sum of the keystroke scores by the number of keystrokes in 
the sum to obtain a normalized string score and comparing the same to a 
predetermined score to determine the probable accuracy of entered 
keystrokes (see at least column 4, lines 35-38 and column 2, lines 29-32). 
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Claim 21: 

Kermani, as shown, discloses the following limitations: 

• means for assigning a score to a keystroke km based upon the time 
independent location of the keystroke in relation to another keystroke 
kn without regard to an amount of time associated with entering the 
keystrokes (see at least column 5, lines 62-67); 

• means for summing the scores of the keystrokes in a string to obtain a 
string score (see at least column 4, lines 35-38); 

• means for dividing the sum of the keystroke scores by the number of 
keystrokes in the sum to obtain a normalized string score and comparing 
the same to a predetermined value indicative of possible fraud or error 
(see at least column 4, lines 35-38 and column 2, lines 16-22). 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or deschbed as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the phor art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 4-6, 9, 16, 17, 20, and 23 are rejected under U.S.C. 103(a) as being 
unpatentable over Kermani, U.S. Patent No. 6,895,514 in view of Brown, US Patent No. 
5,557,686. 
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Claim 4: 

Kermani discloses tlie limitations as shown above. Kermani does not disclose the 
following limitation, but Brown does: 

• there is at least two intervening keystrokes between keystrokes [[K1]]ki 
and [[KN]]kn (see at least column 5, lines 28-30 and column 5, lines 57- 
61). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring timing between keystrokes, which ultimately aids in 
identifying the user. 

Claims 5, 6, 9, 16, 17: 

Kermani, discloses a keystroke score (col. 5, lines 62-67). Kermani does not 
disclose a whole number, linear location, and enhanced value, but Brown does: 

• the score of keystroke k2 . . . kn is an whole number plus the least number 

of adjacent key spaces between keystrokes ki . . . kn-i (see at least 
column 5, lines 28-38 and column 5, lines 59-61, fig. 10). 

• wherein the score of keystroke K2 is based upon the linear distance 
between keystrokes KI and K2 (see at least column 5, lines 28-30 and 
column 5, lines 59-61). 
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• further including adding an enhanced value to the score of a keystroke if 
the keystroke is shifted (see at least column 7, lines 11-17). 

• the score of keystroke km is a whole number plus the least number of 
adjacent keys spaces between keystrokes km and kn (see at least column 

5, lines 59-61). 

• the score of keystroke km is based upon the linear distance between 
keystrokes km and kn (see at least column 5, lines 28-32). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring timing between keystrokes, which ultimately aids in 
identifying the user. 



Claim 20: 

Kermani, discloses the limitations as shown above. Kermani does not disclose the 
following limitation, but Brown does: 

• instructions are further adapted to be executed by said processor to 
perform the method including adding an enhanced value to the score of 
keystroke km.if keystroke km is shifted (see at least column 7, lines 11-17). 
It would have been obvious to one of ordinary skill in the art at the time of 
the invention to modify Kermani to include the keystroke method of Brown since 
this allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 
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Claim 23: 

Kermani discloses the limitations as shown above. Kermani does not disclose 
the following limitation, but Brown does: 

• means for determining if a keystroke is shifted, and adding an enhanced 
value to the score of the keystroke if the keystroke is shifted (see at least 
column 7, lines 11-17). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani to include the keystroke method of Brown since this 
allows for measuring keystroke timing, which ultimately aids in identifying the 
user. 

8. Claims 12-14, 18, 19, and 22 are rejected under U.S.C. 103(a) as being 
unpatentable over Kermani, U.S. Patent No. 6,895,514 in view of Brown, US Patent No. 
5,557,686 and in further view of Kroll, U.S. Patent No. 6,405,922. 

Claim 12: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• keystroke fraud instructions are further adapted to be executed by said 
processor to calculate the accuracy of an online transaction entered by 
keystroke entries on a keyboard comprising summing the normalized 
string scores for a plurality of strings to obtain a transactional score, and 
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dividing tlie sum of tine normalized string scores by the number of strings 
in the sum to obtain a normalized transactional score, whereby the 
normalized transactional score is compared to a predetermined score to 
determine the accuracy of the online transaction (see at least column 4, 

lines 47-48) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identilying fraudulent users. 



Claim 13: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• keystroke fraud Instructions are further adapted to be executed by said 
processor to store in said memory an indication of the absence of 
accuracy based upon said normalized transactional score (see at least 
column 4, lines 47-48). 
It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 
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Claim 14: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• keystroke fraud instructions are further adapted to be executed by said 

processor to add an enhanced value to the score of certain of said 
keystrokes if said keystrokes are shifted (see at least column 4, lines 47- 
48). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 



Claim 18: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• instructions are further adapted to be executed by said processor to 
perform the method including calculating the normalized string scores for 
a plurality of strings, summing the normalized string scores to obtain a 
transactional score, and dividing the sum of the normalized string scores 
by the number of strings in the sum to obtain a normalized transaction 
score and comparing the same to a predetermined score to determine the 
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probability of error or fraud in said l^eystrol^e entries in said online 

transaction (see at least column 4, lines 47-55). 
It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
Identifying fraudulent users. 



Claim 19: 

Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• Instructions are further adapted to be executed by said processor to 
perform the method including determining a risk of fraud or error based 
upon the value of the normalized transactional score in comparison to one 
or more predetermined scores (see at least column 4, lines 47-55). 
It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 



Claim 22: 

Kermani/Brown disclose the limitations as shown above. Kermani further discloses 
the following limitation: 
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• means for calculating the normalized string scores for a plurality of strings 
(see at least column 4, lines 35-38); 



Kermani/Brown disclose the limitations as shown above. Kermani/Brown do not 
disclose the following limitation, but Kroll does: 

• means for summing the normalized string scores to obtain a transactional 
score (see at least column 4, lines 47-48); 

• means for dividing the sum of the normalized string scores by the number 
of strings in the sum to obtain a normalized transactional score and 
comparing the same to a predetermined score indicative of possible fraud 
or error (see at least column 4, lines 47-48). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kermani/Brown to include the keystroke method of Kroll since 
this further allows for measuring keystroke timing, which ultimately aids in 
identifying fraudulent users. 

Response to Arguments 

9. Applicant's arguments filed January 9, 2009 have been fully considered but they 
are not persuasive. Applicant's arguments will be addressed in sequential order as they 
were set forth in the "Remarks" section on the above date. In response to applicant's 
argument that the references fail to show certain features of applicant's invention, it is 
noted that the features upon which applicant relies (i.e., "spatial variations", "time 
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independent location", "independent of time", "witliout regard to an amount of time 
associated with entering tine keystrokes", "a time independent analysis") are not recited 
in the rejected claim(s). Although the claims are interpreted in light of the specification, 
limitations from the specification are not read into the claims. See In re Van Geuns, 988 
F.2d 1181, 26 USPQ2d 1057 (Fed. Cir. 1993). 

Applicant argues that Kermani discloses distance in an unconventional manner, 
without describing "unconventional". The Examiner respectfully points to the following 
quote from Kermani, "It can be seen from equation (2) that the distance d.sub.i for each 
character is calculated as the difference between the time lapse between the two 
adjacent characters as entered by the user minus the mean time lapse of model divided 
by the sum of the mean and the standard deviation for that character (column 5, lines 
62-67)" Kermani therefore teaches that the relationship between keystroke distance 
(relative location) is based on the time lapse between keystrokes. The applicant's 
specification recites "A score can be assigned to a keystroke based upon its distance 
from another keystroke", which inherently involves a time factor due to the distance 
between the keys being used in assigning a score. 
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Conclusion 

1 0. THIS ACTION IS MADE FINAL. Applicant is reminded of tine extension of time 
policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action Is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any Inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thomas West whose telephone number is 571-270- 
1236. The examiner can normally be reached on Tuesday and Wednesday 7:30am - 
5pm EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Fischer can be reached on 571-272-6779. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic 

Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 

USPTO Customer Service Representative or access to the automated information 

system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Thomas West 
Patent Examiner 
Art Unit 3621 
March 18,2009 



/ANDREW J. FISCHER/ 

Supervisory Patent Examiner, Art Unit 3621 



